4 ms·
> If you are logged in as a sudo user, provided allowing only an ssh key, can you can't do anything unless: > - you know the password This assumes one isn't
by tadbit 5y ago
> If you are logged in as a sudo user, provided allowing only an ssh key, can you can't do anything unless:
> - you know the password
This assumes one isn't using password-less sudo (NOPASSWD), which several distros do set by default and many users change to it for convenience.
- aryhdrsfhzdf 5y agoWhat are some examples of these "several distros" that set it by default? Of the major ones I'm willing to use in production (Debian, Ubuntu, RHEL and derivs, SuSE, hesitantly Arch), none offer NOPASSWD sudo to users marked as administrative in each distro's normal way. (i.e. various group memberships) NOPASSWD is poor hygiene.
- mhio 5y agoAmazon Linux
- mastax 5y agoGCP sets it in Debian, apparently.
- gerikson 5y agoRaspbian doesn't require a password when using sudo.
- jschwartzi 5y agoAlso Ubuntu in Azure.